IBM C2150-400 Online Practice Questions and Exam Preparation

IBM C2150-400 Online Questions & Answers

• Question 71:

  How many streaming events per second can be displayed before being accumulated in a result buffer?

  A. 30 results per second
  B. 40 results per second
  C. 50 results per second
  D. 60 results per second
  B. 40 results per second

  ---

  Reference: http://www.juniper.net/techpubs/software/management/strm/2012_0_R2/strm-lm-user- guide.pdf (26)

• Question 72:

  Which statement is true with regard to auto discovery functionality?

  A. All supported DSMs are auto discovered.
  B. Only 50 Log Sources can be auto discovered.
  C. Auto discovered log sources are assigned to a generic log source group.
  D. QRadar license key defines the maximum number of log sources that can be auto discovered.
  C. Auto discovered log sources are assigned to a generic log source group.

  ---

  Reference: http://www.ibm.com/support/knowledgecenter/SS42VS_7.2.1/com.ibm.qradar.doc_7.2.1/ c_logsource_groups.html

• Question 73:

  Which two actions can be selected from the license drop-down in the system and license management screen when working with a new license? (Choose two.)

  A. Apply license
  B. Upload license
  C. Allocate license to system
  D. Allocate system to license
  E. Register system to license
  A. Apply license
  C. Allocate license to system

• Question 74:

  What are the two expected Host Statuses after HA setup if the initial synchronization is complete? (Choose two.)

  A. Primary: Active
  B. Primary: Offline
  C. Secondary: Failed
  D. Secondary: Active
  E. Secondary: Standby
  F. Primary: Synchronizing
  A. Primary: Active
  E. Secondary: Standby

• Question 75:

  Which two file systems does QRadar support for offboard storage partitions? (Choose two.)

  A. XFS
  B. Btrfs
  C. F2FS
  D. EXT4
  E. NTFS
  A. XFS
  D. EXT4

  ---

  Reference: http://www.juniper.net/techpubs/en_US/jsa2014.1/information-products/topic-collections/jsa- configuring-offboard-storage.pdf (page 17)

• Question 76:

  How many days does QRadar keep record of Closed Offense by default?

  A. 1 day
  B. 5 days
  C. 3 days
  D. 7 days
  C. 3 days

  ---

  Reference: http://www.ibm.com/support/knowledgecenter/SS42VS_7.2.1/com.ibm.qradar.doc_7.2.1/ t_qradar_adm_conf_sys_setting.html?lang=frc

• Question 77:

  Who can view all offenses?

  A. All users
  B. Admin user
  C. User who has access to All Log Sources and All Networks
  D. Restricted User who has access to a Specific Log Source and Network
  B. Admin user

• Question 78:

  Which three messages are displayed in the Next Run Time Column while a QRadar Administrator is manually generating a report? (Choose three.)

  A. Generating
  B. (x hour(s) x min(s))
  C. Generating Queues
  D. (x hour(s) x min(s) y sec(s))
  E. Queued (position in the queue)
  F. Queued in the database column
  B. (x hour(s) x min(s))
  D. (x hour(s) x min(s) y sec(s))
  E. Queued (position in the queue)

• Question 79:

  The following message is displayed in the System Notification Widget on the Dashboard:

  

  Which script should be run to help determine the cause of the dropped events?

  A. /opt/qradar/support/dumpGvData.sh
  B. /opt/qradar/support/dumpDSMInfo.sh
  C. /opt/qradar/support/cleanAssetModel.sh
  D. /opt/qradar/support/findExpensiveCustomRules.sh
  D. /opt/qradar/support/findExpensiveCustomRules.sh

• Question 80:

  Which attribute is valid when defining the user roles to provide the necessary access?

  A. Reports: Maintain Templates
  B. Network Activity: View Custom Rules
  C. Network Activity: Manage Times Series
  D. Log Activity: User Defined Event Properties
  C. Network Activity: Manage Times Series